mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-14 14:26:04 +02:00
Kevin Veen-Birkenbach
f106d5ec36
• Guard admin tasks via XWIKI_SSO_ENABLED • Create admin using XWikiUsers object API • Wait for REST without DW redirect • Install OIDC/LDAP via /rest/jobs (+verify) • Mount xwiki.cfg/properties under Tomcat WEB-INF • Build REST URLs with url_join; enable DW auto bootstrap + repos https://chatgpt.com/share/68c42502-a5cc-800f-b05a-a1dbe48f014d
74 lines
2.8 KiB
YAML
74 lines
2.8 KiB
YAML
# 1) Create page XWiki.<userid> (PUT is idempotent)
|
|
- name: "XWIKI | Ensure user page exists: XWiki.{{ XWIKI_ADMIN_USER }}"
|
|
uri:
|
|
url: "{{ XWIKI_REST_BASE }}wikis/xwiki/spaces/XWiki/pages/{{ XWIKI_ADMIN_USER | urlencode }}"
|
|
method: PUT
|
|
user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
|
|
password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
|
|
force_basic_auth: true
|
|
status_code: [201, 202, 204, 200]
|
|
headers:
|
|
Content-Type: "application/xml"
|
|
Accept: "application/xml"
|
|
body: |
|
|
<page xmlns="http://www.xwiki.org">
|
|
<title>{{ XWIKI_ADMIN_USER }}</title>
|
|
</page>
|
|
register: _user_page
|
|
|
|
# 2) Add XWiki.XWikiUsers object (only if it does not already exist)
|
|
- name: "XWIKI | Check if XWikiUsers object exists"
|
|
uri:
|
|
url: "{{ XWIKI_REST_BASE }}wikis/xwiki/spaces/XWiki/pages/{{ XWIKI_ADMIN_USER | urlencode }}/objects?classname=XWiki.XWikiUsers"
|
|
method: GET
|
|
user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
|
|
password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
|
|
force_basic_auth: true
|
|
status_code: [200, 404]
|
|
register: _users_obj_list
|
|
|
|
- name: "XWIKI | Add XWiki.XWikiUsers object"
|
|
uri:
|
|
url: "{{ XWIKI_REST_BASE }}wikis/xwiki/spaces/XWiki/pages/{{ XWIKI_ADMIN_USER | urlencode }}/objects"
|
|
method: POST
|
|
user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
|
|
password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
|
|
force_basic_auth: true
|
|
status_code: [201, 200]
|
|
headers:
|
|
Content-Type: "application/xml"
|
|
Accept: "application/xml"
|
|
body: |
|
|
<object xmlns="http://www.xwiki.org">
|
|
<className>XWiki.XWikiUsers</className>
|
|
<properties>
|
|
<property name="first_name">{{ users.administrator.firstname | default('Admin') }}</property>
|
|
<property name="last_name">{{ users.administrator.lastname | default('User') }}</property>
|
|
<property name="email">{{ users.administrator.email }}</property>
|
|
<property name="active">1</property>
|
|
</properties>
|
|
</object>
|
|
when: _users_obj_list.status == 404 or ('<object' not in (_users_obj_list.content | default('')))
|
|
register: _user_obj_created
|
|
|
|
# 3) (Optional) Assign admin rights by adding the user to XWikiAdminGroup
|
|
- name: "XWIKI | Ensure user is in XWikiAdminGroup"
|
|
uri:
|
|
url: "{{ XWIKI_REST_BASE }}wikis/xwiki/spaces/XWiki/pages/XWikiAdminGroup/objects"
|
|
method: POST
|
|
user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
|
|
password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
|
|
force_basic_auth: true
|
|
status_code: [201, 200]
|
|
headers:
|
|
Content-Type: "application/xml"
|
|
Accept: "application/xml"
|
|
body: |
|
|
<object xmlns="http://www.xwiki.org">
|
|
<className>XWiki.XWikiGroups</className>
|
|
<properties>
|
|
<property name="member">XWiki.{{ XWIKI_ADMIN_USER }}</property>
|
|
</properties>
|
|
</object>
|
|
when: XWIKI_LDAP_ENABLED | bool == false and XWIKI_OIDC_ENABLED | bool == false
|